There's some gain to be had in that I can reliably expect md5 to be available and compatible with pretty much anything back as far as Perl4 or PHP from the 90s, right up to bleeding edge version of Rust or Clojure or exotic language de jour.

Whether that's actually worth anything for a particular use case is a good question, and the answer will mostly be "not just no but HELL NO!"

But is it slower than sha1? Which is the alternative if you don't roll your own in V8.

If you rely on non-guessability you use it as a security measure? So your sentence doesn’t invalidate previous poster.